Yet another data point: I rebuilt 7.0.56-3+deb8u5 with CVE-2016-6797.patch deleted, and again the problem goes away.
Arne __ This is the maintainer address of Debian's Java team <http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-maintainers>. Please use [email protected] for discussions and questions.
